How do you deal with phising emails at your company?

We have a SOC team hired, they report that 50% of their time goes to reviewing phising emails reported by users. We use the Microsoft phising button for the end users.

The SOC team says, that as they spend so much time investigating phising emails, they don't have time to review other tools or do threat hunting. Their investigation for phising mainly focus on reviewing sender reputation, reviewing link reputation and other repetitive tasks.

I'm trying to figure out a …

cybersecurity deal don emails end microsoft phising report soc team